CVE-2018-0336: cisco prime_collaboration
Vulnerability summary
CVE-2018-0336 is a high (CVSS 8.8) vulnerability in cisco prime_collaboration. EPSS estimates a 2.34% chance of exploitation in the next 30 days, higher than 83.3% of scored vulnerabilities.
Timeline
- 07-06-2018PublishedVulnerability first disclosed.
- 29-11-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privileges to the Administrator level. The vulnerability is due to insufficient authorization enforcement on batch processing. An attacker could exploit this vulnerability by uploading a batch file and having the batch file processed by the system. A successful exploit could allow the attacker to escalate privileges to the Administrator level. Cisco Bug IDs: CSCvd86578.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.34%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
-0.05 pp
From 2.38% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
- CWE-862Missing AuthorizationThe product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Affected systems
Cisco1 product
1 vendor · 1 product
References
3 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-escalationX Refsource CONFIRMVendor Advisory